How To Configure File Server Resource Manager in Windows Server 2012 R2 and Above
How To Configure File Server Resource Manager in Windows Server 2012 R2 and Above
Table of Contents
Introduction .............................................................................................................................................................................................. 3
Important Info for Windows Server 2008 R2 and Server 2012: .................................................................................................33
Support ....................................................................................................................................................................................................34
Copyright .................................................................................................................................................................................................34
Trademarks .............................................................................................................................................................................................35
Introduction
Windows File Server Resource Manager (FSRM) enables you to classify your most important and sensitive data in your
File Servers. Add the FSRM role from the File & Storage Services in the “Add roles and features wizard”.
You can refer to the following to configure FSRM so that it works with LepideAuditor. Once properly configured, you
will be able to see the records in LepideAuditor itself.
2. Click Next and Select your Domain Controller from the list.
3. Scroll down to “File and Storage Services” and expand “File and iSCSI Services” to see “File Server Resource
Manager”.
Initial Configuration
Now that File Server Resource Manager is installed on the server, there’s some initial configuration that you’ll need to
perform first.
1. First, open the FSRM administrative tool. Right-click on File Server Resource Manager (local) and then
Configure Options.
2. The first tab you’ll be presented with is the Email Notifications. Here’s where you’ll want to specify your SMTP
server and other default email settings. The Default administrator recipients can be used in other areas of
FSRM as a variable. If you need to customize who receives which notifications (for example, one person
receives quota notices and another receives storage reports), you’ll be able to configure that later.
3. The Notification Limits tab allows you to limit how often notifications are generated. Typically, the defaults
have worked well for me personally, but your mileage may vary.
4. The Storage Reports tab allows you to customize default parameters on the various storage reports FSRM
generates. These defaults can be overridden, but let you set baselines or defaults so you don’t have to
constantly change your parameters if you’re using the same thing over and over. Typically, we don’t make
changes here until we’ve been able to baseline a particular file server.
5. The Report Locations tab, as the name implies, lets you change where reports generated by FSRM are stored.
Do not make any changes to these locations as these will also be entered in the LepideAuditor console.
6. The File Screen Audit tab lets you enable storing of file screening activity in an auditing database. There is
not much use for this feature. However, depending on your environment, this could be very valuable to
enable if you need to track files that are being blocked form your file server.
7. The Automatic Classification tab allows you to set a schedule for your file classifications to run. If you’re
planning on using this feature, you’ll need to visit this tab at some point to set up a schedule.
File Classification allows you to supplement those attributes with additional information that may be industry or
organization specific based on classifications you perform manually or automatically. File Classification has been
greatly improved in Server 2012. Many of the features discussed below like which users can classify files, the UI in
Explorer, and automatic classification aren't available in Server 2008 R2.
1. In the FSRM administrative tool, go to the Classification Management area. Expand Classification
Management and click on Classification Properties. Now click on Create Local Property.
2. Set a Name, Description, and Property type. Property types can be Yes/No, Date/Time, Numbers, Multiple
Choice Lists, Ordered Lists, Single Choice, String, and Multi-String. In the example here, we've used Social
Security Number since that is a very common piece of data, companies in the US consider sensitive and want
to identify.
1. Now that we’ve created a file classification, we can configure the classification to be applied to files
automatically via a schedule or on an ongoing basis. In the FSRM administrative tool, go to Classification Rules
under the Classification Management Area, and click on Create Classification Rule.
2. In the General tab, set a Rule name and ensure that Enabled is checked.
3. In the Scope tab, set the type of data and folders that will be scanned.
4. In the Classification tab, set the Classification method to Content Classifier. In Property, choose the
classification and set the value. In Parameters, click Configure. In the Classification Parameters, you'll have to
set the logic that will be used for finding information inside files. In the case of our example, Social Security
Numbers always follow the pattern 3 numbers, 2 numbers, 4 numbers. In addition to use regular
expressions, you can also use a string value (both case-sensitive and case-insensitive).
5. In the Evaluation Type tab, determine whether files should be re-evaluated or whether they should be
evaluated only once. Also determine whether you want to overwrite or keep old values and click OK.
6. You may have also noticed the option, Configure Classification Schedule in the Classification Rules area. If
you're updating your classification rules, you will need to revisit these settings. If you're planning on
automatically classifying files, your business needs are going to dictate how often you need the process to
run. An initial pass over a large data set can take quite some time... so definitely set the schedule to run
during off hours and setting the limit.
2. Enter a Report Name. Uncheck all other reports and check only 'Files by Property' in the 'Report Data' section.
Adjust the 'Maximum Number' if needed. Check ‘XML’ in Report Formats and click on 'Edit Parameters'
3. In the 'Report Parameters' window, select a Property from the drop down, modify any additional settings if
necessary and click on 'Ok'.
4. Configure the 'Scope' and 'Delivery' tab options as needed: Select the folders in which reports should be
generated.
3. Change the 'Maximum Number' value shown below to a higher one (e.g. 1,000,000).
4. Select 'Files by Property' in the Reports list box and click on the 'Edit Parameters' button to open the 'Report
Parameters' window.
5. Change the values in the 'Maximum number of property values per report' and 'Maximum number of files
per each property value' fields to a higher one (e.g. 50 and 1,000,000 respectively) and click on 'Ok' button.
1. Select an existing Storage Report and double click to open its properties.
2. In the settings tab, select XML from the “Report Formats” and click “OK”.
Setting a Schedule
A schedule must be set in two sections in FSRM:
5. To classify files on the fly as soon as they are created, check the 'Allow continuous classification for new files'
box, as shown below:
Go to the “Schedule” tab in the Storage Report Task Properties window and select the Time, Frequency
(Weekly or Monthly) and Days and click “OK”.
2. Run on demand storage reports by right clicking on each report and selecting the 'Run Report Task Now' or
by clicking on the same option from the 'Actions' pane after selecting the respective report.
2. Select 'Overwrite the existing value' and check both the boxes below it.
Support
If you are facing any issues whilst installing, configuring or using the solution, you can connect with our team using
the below contact information.
Rest of the World: +91 (0) -991-004-9028 Rest of the World: +91(0)-991-085-4291
Alternatively, visit http://www.lepide.com/contactus.html to chat live with our team. You can also email your queries
to the following addresses:
[email protected] [email protected]
Copyright
LepideAuditor, LepideAuditor App, LepideAuditor App Server, LepideAuditor (Web Console), LepideAuditor
Logon/Logoff Audit Module, any and all components, any and all accompanying software, files, data and materials,
this guide, and other documentation are copyright of Lepide Software Private Limited, with all rights reserved under
the copyright laws. This user guide cannot be reproduced in any form without the prior written permission of Lepide
Software Private Limited. No Patent Liability is assumed, however, on the use of the information contained herein.
In no event does Lepide Software Private Limited authorize you or anyone else to use LepideAuditor and the above
listed accompanying programs in applications or systems where LepideAuditor and the above listed accompanying
programs’ failure to perform can reasonably be expected to result in a significant physical injury, or in loss of life. Any
such use is entirely at your own risk, and you agree to hold Lepide Software Private Limited harmless from any and
all claims or losses relating to such unauthorized use.
Trademarks
LepideAuditor, LepideAuditor App, LepideAuditor App Server, LepideAuditor (Web Console), LepideAuditor
Logon/Logoff Audit Module, Lepide Object Restore Wizard, Lepide Active Directory Cleaner, Lepide User Password
Expiration Reminder, and LiveFeed are registered trademarks of Lepide Software Pvt Ltd.
All other brand names, product names, logos, registered marks, service marks and trademarks (except above of
Lepide Software Pvt. Ltd.) appearing in this document are the sole property of their respective owners. These are
purely used for informational purposes only. We have compiled a list of such trademarks, but it may be possible that
a few of them are not listed here.
Microsoft®, Windows®, Windows Server®, Windows Server 2008®, Windows Server 2008 R2, Windows Server
2012®, Windows Server 2012®, Windows Server 2012®, and Windows Server 2016® are either registered
trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.